diff --git a/.planning/phases/17-blog-companions/17-REVIEW-DISPOSITION.md b/.planning/phases/17-blog-companions/17-REVIEW-DISPOSITION.md index 1155446..dbff5b5 100644 --- a/.planning/phases/17-blog-companions/17-REVIEW-DISPOSITION.md +++ b/.planning/phases/17-blog-companions/17-REVIEW-DISPOSITION.md @@ -5,23 +5,23 @@ titles: json findings: - id: CR-01 severity: critical - disposition: open + disposition: fixed title: "Sitemap writes admin-supplied `javascript:` URLs into ``, which sitemap.xsl renders as a clickable link on the public origin (stored XSS)" - id: WR-01 severity: warning - disposition: open + disposition: fixed title: "Moving a menu entry to another menu orphans its subtree, and a parent from another menu silently overrides the chosen menu" - id: WR-02 severity: warning - disposition: open + disposition: fixed title: "Reorder page sends overlapping saves; out-of-order completion leaves the database on an older tree than the screen shows" - id: WR-03 severity: warning - disposition: open + disposition: fixed title: "A registry menu entry or sitemap row saved without a reference passes validation and then silently disappears" - id: WR-04 severity: warning - disposition: open + disposition: fixed title: "`journal-post` resolves unpublished posts, exposing draft titles and URLs on the anonymous menu API and in sitemap.xml" - id: WR-05 severity: warning @@ -71,20 +71,20 @@ findings: severity: info disposition: open title: "Repeater row errors stay at their old index after a row is moved or removed" -open: 14 +open: 9 total: 17 -recorded: 2026-10-12T19:49:51.034Z +recorded: 2026-10-12T19:50:01.936Z --- # Phase 17: Code Review Disposition | Finding | Severity | Disposition | Source | |---------|----------|-------------|--------| -| CR-01 | critical | open | - | -| WR-01 | warning | open | - | -| WR-02 | warning | open | - | -| WR-03 | warning | open | - | -| WR-04 | warning | open | - | +| CR-01 | critical | fixed | 17-REVIEW-FIX.md | +| WR-01 | warning | fixed | 17-REVIEW-FIX.md | +| WR-02 | warning | fixed | 17-REVIEW-FIX.md | +| WR-03 | warning | fixed | 17-REVIEW-FIX.md | +| WR-04 | warning | fixed | 17-REVIEW-FIX.md | | WR-05 | warning | fixed | 17-REVIEW-FIX.md | | WR-06 | warning | fixed | 17-REVIEW-FIX.md | | WR-07 | warning | fixed | 17-REVIEW-FIX.md |